GlassWire 3.4.694 (New Driver Release)

Some will argue… Better late than never.

Personally the word NEW gives me the chills, So can all you dare-devils who are hell bent on trying this, can you please post your findings here. This will helps other decide (inc myself) if this new approach is worth the time and effort.

Regards All

I just don’t like the Option? Weird…

2024-09-11_13-09-05

Hello Andrea_GlassWire

Please explain further about the option above “Use Legacy Driver”

If we install the new drive over the top of the current driver is this going to cause problems?
or does the old driver get removed when updating?

Is it best we use the clean install with the new driver?

What are the benefits with the new driver vs using the
old legacy driver?

I am sure others users would like some clarification as well.

Thank you

1 Like

ESET is reporting that version as a threat due to GWEventLog.dll

LOL

This is probably the smartest thing the new owners have done TBH.

Adding the options for installing the Legacy Driver looks like a fall-back option in case the new driver doesn’t work for some users. installing the old driver with the fixes from the newer Version of GW does make sense.
OR
Newer features due in future updates may not be available to legacy license holders.

I still wont install until a few more folks have tested this.

+1 ESET is reporting that version as a threat due to GWEventLog.dll

Hi @GlassWare,
I’ll try to be as specific as possible.

  1. No
  2. Yes
  3. Not necessary, but feel free to go with a clean install if you prefer
  4. The new driver has a new kernel that improves stability and speed. Currently, we wanted to leave the legacy driver only as a fallback option, but in the future we’ll remove it.

Hope this helps.

@Scyzor-yk @Laszlo_Gero ESET is reporting a false positive. I’m sorry there’s nothing we can help with, here.
Rest assured we didn’t put any virus in the software :smiley:

1 Like

I was sure of that. I reported the false positive to ESET.

3 Likes

Yes, you can help with it. As the publisher you can report back to ESET that your app is on a blacklist of threats.

2 Likes

Webroot didn’t know the new files but I contacted them and they whitelisted the new files so all is well.

Tue 2024-09-10 13:59:58.0604 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 3 (20808)
Tue 2024-09-10 13:59:58.0604 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 4 (20808)
Tue 2024-09-10 13:59:58.0604 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 8 (20808)
Tue 2024-09-10 13:59:58.0604 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 6 (20808)
Tue 2024-09-10 14:00:02.0630 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 3 (20808)
Tue 2024-09-10 14:00:02.0630 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 4 (20808)
Tue 2024-09-10 14:00:02.0630 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 8 (20808)
Tue 2024-09-10 14:00:02.0630 Monitoring process E:\Users\Daniel\Downloads\glasswire-setup-3.4.694-full.exe [334591F1044408785206F65F392115A6]. Type: 6 (20808)
Tue 2024-09-10 14:00:06.0072 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\vc_redist.x86.exe [DD0232EE751164EAAD2FE0DE7158D77D]. Type: 2 (20811)
Tue 2024-09-10 14:00:44.0102 Monitoring process D:\Program Files (x86)\GlassWire\uninstall.exe [771D30FC6ACD46BCAF3F7C0448219A31]. Type: 2 (1431)
Tue 2024-09-10 14:00:52.0174 Monitoring process C:\Windows\SysWOW64\wevtutil.exe [95405FC042FD00B5C62268B84E7177B9]. Type: 2 (20820)
Tue 2024-09-10 14:01:12.0360 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\GWInstSt.exe [63DC9E4A693261F14924D8692D2EB442]. Type: 3 (20810)
Tue 2024-09-10 14:01:12.0360 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\GWInstSt.exe [63DC9E4A693261F14924D8692D2EB442]. Type: 4 (20810)
Tue 2024-09-10 14:01:12.0375 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\GWInstSt.exe [63DC9E4A693261F14924D8692D2EB442]. Type: 8 (20810)
Tue 2024-09-10 14:01:12.0375 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\GWInstSt.exe [63DC9E4A693261F14924D8692D2EB442]. Type: 6 (20810)
Tue 2024-09-10 14:01:13.0305 Monitoring process C:\Users\Daniel\AppData\Local\Temp\nsc1B31.tmp\GWInstSt.exe [63DC9E4A693261F14924D8692D2EB442]. Type: 2 (20810)
Tue 2024-09-10 14:01:17.0412 Monitoring process C:\Windows\SysWOW64\wevtutil.exe [95405FC042FD00B5C62268B84E7177B9]. Type: 2 (20820)
Tue 2024-09-10 14:01:17.0943 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 3 (20822)
Tue 2024-09-10 14:01:17.0943 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 4 (20822)
Tue 2024-09-10 14:01:18.0068 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 8 (20822)
Tue 2024-09-10 14:01:18.0068 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 6 (20822)
Tue 2024-09-10 14:01:21.0008 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 3 (20822)
Tue 2024-09-10 14:01:21.0008 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 4 (20822)
Tue 2024-09-10 14:01:21.0133 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 8 (20822)
Tue 2024-09-10 14:01:21.0133 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 6 (20822)
Tue 2024-09-10 14:01:23.0851 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 3 (20822)
Tue 2024-09-10 14:01:23.0851 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 4 (20822)
Tue 2024-09-10 14:01:23.0992 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 8 (20822)
Tue 2024-09-10 14:01:23.0992 Monitoring process D:\Program Files (x86)\GlassWire\GWCtlSrv.exe [56D6DB5EA2E8EF737A0CF9C808B8D533]. Type: 6 (20822)
Tue 2024-09-10 14:01:28.0514 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 3 (20821)
Tue 2024-09-10 14:01:28.0514 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 4 (20821)
Tue 2024-09-10 14:01:28.0608 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 8 (20821)
Tue 2024-09-10 14:01:28.0608 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 6 (20821)
Tue 2024-09-10 14:01:51.0559 Monitoring process D:\Program Files (x86)\GlassWire\GlassWire.exe [E4ADF42227B3BADFCD239669363B4BDF]. Type: 3 (20835)
Tue 2024-09-10 14:01:51.0559 Monitoring process D:\Program Files (x86)\GlassWire\GlassWire.exe [E4ADF42227B3BADFCD239669363B4BDF]. Type: 4 (20835)
Tue 2024-09-10 14:01:51.0715 Monitoring process D:\Program Files (x86)\GlassWire\GlassWire.exe [E4ADF42227B3BADFCD239669363B4BDF]. Type: 8 (20835)
Tue 2024-09-10 14:01:51.0715 Monitoring process D:\Program Files (x86)\GlassWire\GlassWire.exe [E4ADF42227B3BADFCD239669363B4BDF]. Type: 6 (20835)
Tue 2024-09-10 14:01:58.0989 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 3 (20821)
Tue 2024-09-10 14:01:58.0990 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 4 (20821)
Tue 2024-09-10 14:01:59.0057 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 8 (20821)
Tue 2024-09-10 14:01:59.0057 Monitoring process D:\Program Files (x86)\GlassWire\GWIdlMon.exe [1C41B1C31717490B13B721A92F8D4888]. Type: 6 (20821)
Tue 2024-09-10 14:02:27.0507 Scan Started: [ID: 136 - Flags: 551/0]
Tue 2024-09-10 14:03:04.0012 Scan Results: Files Scanned: 61071, Duration: 36s, Malicious Files: 0

From Webroot Support:

Hello Daniel,

Thank you for submitting the files for our review. We’ve gotten them whitelisted and you should be all set to go.

Regards,
Webroot Advanced Malware Removal Team

2 Likes

Thanks for the details the new Kernel Driver is working well on my 3 Win 10 Pro systems.

1 Like

Looks like ESET whitelist suspicious DLL

This update also makes changes to the Network Scanner. For me, this reset most of my icons to the generic icon when I had previously selected device appropriate icons. It also places a non-removable ad for another service at the bottom of the screen. :frowning_face:

Hi @ittroll,
in this release the network scanner has been redesigned and is now more powerful.
It’s now possible to access your connected devices directly from GlassWire (Through their IP address),
I’m sorry for the icon reset but you now have also more to choose from.
Also, as we are just providing just a network scanner (as our business doesn’t really enter Network Monitoring), we are just referring Domotz, that is a full professional software for the ones who have network monitoring needs.

Ah, it took some finding but when you hover over a device you get a (···) menu in the Last Seen column from which you can launch a web browser. I’m not sure how useful that is. If the device is running a web server you are likely to encounter a certificate warning when accessing by IP. For other devices it serves no purpose.

So there was time to code an embedded ad, but no time to migrate user’s preferences. If I don’t have need for the other service how can I dismiss the ad?

1 Like

Have you tried blocking the “GlassWire Control Service”?

Doing so will block auto updates, Access to Virustool and access to Gw’s terminal. If you are not bothered by any of those mentioned services try blocking.

That would still leave the advert.

Are you using a legacy license or GW’s latest SaaS model?

I dont have GW installed right now as im not so sure about this new version and previous version would B’Screen frequently. Can you post a screen shot of where the advert is placed?

When you first install GW (as a clean install) does the ad pop up when the app dials home or does the ad come part of the install?

Hi Ferdinand

FYI. You can see where the advert is placed, its coded into GW,

link below…

1 Like

Ad is hardcoded into the UI. :face_vomiting:

2 Likes